Delete Indices Action removes also Index patterns from Kibana

Elastic Stack Elasticsearch
1

Hi,

I was wondering If anyone can explain to me why and how I can avoid that issue, when I execute through curator an action to delete my old indices, it also delete(removes) automatically the Index patterns from my Kibana dashboard.

This is the content of curator action:
---

actions:
  1:
    action: delete_indices
    description: >-
      Delete indices older than 30 days
    options:
      timeout_override: 400
      continue_if_exception: False
    filters:
    -  filtertype: age
       source: creation_date
       direction: older
       unit: days
       unit_count: 30

How I can avoid that?
Thanks!

2

Having only filtertype: age using creation_date does not exclude any index from potential selection. If you want to exclude system indices, I recommend using a pattern filter first:

    filters:
    - filtertype: pattern
      kind: regex
      value: '^\.*'
      exclude: true
    - filtertype: age
      source: creation_date
      direction: older
      unit: days
      unit_count: 30

This will exclude any index starting with a .. As always, test with --dry-run before actually deploying.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.